Dumps4cert.com : Latest Dumps with PDF and VCE Files
2018 May Cisco Official New Released 500-254
100% Free Download! 100% Pass Guaranteed!

Implementing and Configuring Cisco Identity Services Engine (SISE)

Question No: 11

What are the three default Cisco ISE identity user groups? (Choose three.)

1. employee

2. contractor

3. activated guest

4. guest

5. sponsor

Answer: A,C,D

Question No: 12

Which three features require accurate time? (Choose three.)

1. EAP-TLS-based authentication

2. EAP-MS-CHAPv2-based authentication

3. accurate posture assessment results

4. Active Directory integration

5. consistent profiling data collection

6. accurate and reliable logging

Answer: A,D,F

Question No: 13

What is the default authorization rule in Cisco ISE?

1. permit all access

2. deny all access

3. redirect users to CWA

4. redirect users to LWA

Answer: A

Question No: 14

If there is a firewall between Cisco ISE and an Active Directory external identity store, which port does not need to be open?

1. TCP 88

2. TCP 445

3. UDP 53

4. UDP 123

5. UDP/TCP 389

Answer: C

Question No: 15

Which three network information items are required to set up Cisco ISE? (Choose three.)

1. primary name server

2. secondary name server

3. Network Time Protocol server

4. hostname

5. IP address and netmask of the Gigabit Ethernet 1 interface

Answer: A,C,D

Question No: 16

If MAB is enabled before WebAuth in Policy -gt; Authentications, what option must be selected if authentication fails, in order for users to have the ability to log in to the guest portal?

1. Accept

2. Reject

3. Continue

4. Drop

Answer: B

Question No: 17

When does the browser get redirected in WebAuth?

1. when there is a request for DNS

2. before getting the IP address

3. when there is a request for a web page

4. when the Cisco NAC Agent reaches the Policy Service node

Answer: C

Question No: 18

Which of these is NOT an Inline Posture node operating mode?

1. router mode

2. bridged mode

3. transparent mode

4. maintenance mode

Answer: C

Question No: 19

What is the cisco-av-pair automatically set to for an Inline Posture node profile?

1. ipep-compliant=true

2. ipep-authz=true

3. inline-posture=true

4. SessionIdValueamp;action=cpp

Answer: B

Question No: 20

Which Authentication Policy option should be selected for MAB rule to support Central Web Auth?

1. Accept

2. Reject

3. Continue

4. Drop

Answer: C

100% Dumps4cert Free Download!
–Download Free Demo:500-254 Demo PDF
100% Dumps4cert Pass Guaranteed!
–500-254 Dumps

	Dumps4cert	ExamCollection	Testking
Lowest Price Guarantee	Yes	No	No
Up-to-Dated	Yes	No	No
Real Questions	Yes	No	No
Explanation	Yes	No	No
PDF VCE	Yes	No	No
Free VCE Simulator	Yes	No	No
Instant Download	Yes	No	No